A tool which can be used for Forensic Investigations, Hacking, Backing up and Debugging of Android devices
Most of us use smart phones in our day to day lives either to take a call, send an SMS, browse internet, view mails or play games. Therefore Smartphone contain our personal information such as photos, videos, contact details, emails and SMS. Some of us even store usernames and passwords of mail addresses or of favorite web sites in our smart phones for ease of access. This certainly makes our lives easier but what will happen if someone steal your phone or you lose it. The person who receives it will have the full access to all of your personal information.
If you are a security concerned person, you may have locked your phone to protect it. But this lock can be easily broken by a person who knows his way around. For example, if you are using an Android phone, there is a really nice tool called ADB or the Android Debug Bridge which allows you to open a shell to access the Android device by issuing two three commands. And if your phone is rooted, this shell can be easily created with super user permission thus allowing the full control of the device.
Even though there are many uses, the most interesting use of ADB is its ability to capture and retrieve databases in the Android Phone. Android Stores all of its information such as Contacts, SMS, Usernames and Passwords in SQLite databases. If the phone is rooted, ADB can be used to easily download these databases to your PC and to analyze them to capture the information stored in them. Following image show how acquiring Contacts Database is done and a snapshot of the content inside the database.
As the above table shows, it is possible to acquire all the contacts in the contact database. Furthermore deleted contacts which were deleted several days ago can also be found using SQLite Forensic tools such as epilog.
Not only Contact Details, but much other information such as SMS, Call Logs, Web History, emails, Geo Tags and even saved usernames and passwords can be easily acquired using ADB (Those acquired information are represented at the end of the post). The interesting part is that even the general lock that you put into your phone will not work in this scenario to secure your information since ADB directly access the Kernel module.
Getting information is not only the end of what a hacker can do using ADB. Once the databases are obtained it is possible to write cracks and malicious triggers to those databases and then upload them back again to the Smartphone making it more vulnerable and allowing hackers to obtain any information at any time they want.
Even though all of the above talk make ADB looks bad, ADB, however is not only a tool used by hackers to exploit Android, but it is a tool which helps developers to debug the Android Kernel. Furthermore it can be used widely for Forensic Investigations and for taking backups of the information.
ADB can be used to find and carve forensic information from the phone by investigators through the ADB Shell. Furthermore experienced users can use ADB to backup their SMS and contact databases to their PCs while Developers can run, test and debug their applications using ADB. Therefore ADB can be defined as a tool which can be used for both the good and bad.
As users, it is our own responsibility to make sure that malicious users cannot use ADB on our Android devices to gather our personal information. The way to do this is also simple, we only have to turn off USB Debugging mode (Settings > Applications > Development) of the Android Phone and to put a lock to the phone restricting others from turning this option back on. This is a very simple yet effective method, but most of the people leave this option on mainly because of their ignorance.
Even though smart phones are really useful for us in many ways, they can present certain security risks as mentioned above, possibly because of the ignorance of the users. Therefore it is a must for all of us to learn how to use smart phones securely protecting our personal information.
Following are some of the information gathered using ADB from a Smartphone
SMS extracted from the Message
Call Logs extracted from the Message
Extracted Browsing History and Bookmarks
Extracted Google Search Results
Extracted passwords and usernames in clear text
Extracted email credentials in clear text
Samples of extracted emails
Extracted Geo Information
Subscribe to our mailing list and get interesting stuff and updates to your email inbox.
thank you for subscribing 🙂
awww something went wrong 🙁
We respect your privacy and take protecting it seriously
Seedstars, a global organization based in Switzerland promotes, connects and invests up to $1 million USD in emerging market startups through their exclusive startup competition held in over 60 countries.
Seedstars, a global organization based in Switzerland promotes, connects and invests up to $1 million USD in emerging market startups through their exclusive startup competition held in over 60 countries. Last year, we saw Seedstars come to Sri Lanka for the first time. LayUp was selected as the winner of the first Seedstars Colombo, which was held last year. LayUp then went onto represent Sri Lanka as a finalist at Seedstars Global. Eight startups will be competing at SeedStars Colombo 2017.
The winning startup will receive an all-expenses paid trip to both the Seedstars Asia Regional Summit in Bangkok. They’ll also win a trip to Switzerland to compete at the Seedstars Global Summit for equity investments of up to USD 1 million, and to meet with international mentors and investors.
(Thursday) 5:00 pm - 8:30 pm
MAS Innovation Center
#50 Foster Lane, Colombo
Mobile Application Security Beyond Compliance Speaker Christopher Stewart is an IT Infrastructure and Security Practitioner with over 11 years of experience including cyber defense and Governance & Audit areas. Here's your chance to
Mobile Application Security
Christopher Stewart is an IT Infrastructure and Security Practitioner with over 11 years of experience including cyber defense and Governance & Audit areas. Here’s your chance to catch Christopher’s session on Mobile Application Security: Beyond Compliance.
Sign up via Email [email protected] | Call us on 011 4713290
*Priced at Rs. 500 (free for CSSl members)
(Monday) 5:45 pm - 7:45 pm
Prof Stanley Wijesundera Mawatha, Colombo 00700
Startup weekend-Trincomalee Beach Calling entrepreneurs, Growth Hackers, Dreamers, Rain Makers and Startup Catalysts to change the world in 54 hours! Bring your creativity and skills and Join Startup Weekend Trincomalee
Startup weekend-Trincomalee Beach
Calling entrepreneurs, Growth Hackers, Dreamers, Rain Makers and Startup Catalysts to change the world in 54 hours! Bring your creativity and skills and Join Startup Weekend Trincomalee ,Friday 27th to Sunday 29st Octon,2017 at Trinco beach hotel, Trinco
What’s Startup Weekend, Anyway?
Startup Weekend is a global phenomenon – 54 hours of fast and furious prototype development through to exploring potential markets and pitching. It’s an unparalleled opportunity to build lasting relationships with co-founders; mentors, and investors.The real value comes from taking an idea from concept through to execution using Lean tactics and working under high pressure with the best startups.
Google for Entrepreneurs is the global partner for Techstars Startup Weekend Program, including Startup Weekend, Startup Next and Startup Digest. Google is a sponsor of Techstars Accelerator Programs. Techstars collaborates with the Google for Entrepreneurs campuses across the globe to support engagement with entrepreneurs everywhere.
What You Can Do?
In short, Startup Weekend shapes the lives of many people as a starting point as entrepreneurs and startup enthusiasts. Ultimately, it’s an amazing spring board to get started on something (a new business, career at a startup or great relationships).
Come pitch, join a team, iron out your business model, and build away! In just 54 hours teams will come together to create startups from scratch and learn about entrepreneurship in a hands-on and meaningful way. Developers, designers, business experts, and makers will come to build prototypes and launch startups that use hardware or software to interconnect us all and change the world.
WHO GOES TO STARTUP WEEKENDS?
Experienced business people or budding entrepreneurs, Creative designers, Coders, growth hackers who are looking for new ideas and wanting to challenge their skills – Startup Weekends are a fun and exciting way to to upskill and test yourself in the world of startups
WHAT DO YOU DO AT A STARTUP WEEKEND?
Starting from 6.30 PM on Friday registration will be done, Welcome speech, Dinner, Startup pitches ideas chosen and lasting teams formed. By late Friday night you’ll be on your way with goals set and roles assigned.
Saturday is all about validation – contacting potential customers and checking out if there is really a market for your idea – and reacting fast if you need to change. Meanwhile if you’re a developer or a designer you’ll be furiously building the product.
Sunday is about making it work and preparing for the final pitch to a panel of carefully chosen judges. Throughout the process mentors from all backgrounds will be on hand. (link to timetable)
WHAT HAPPENS AFTER
Celebrate! We’ll put in place a follow up event, and there will be other opportunities, including our Co-Starters program.
What is the benefit of attending Startup Weekend ?
Startup Weekends are all about learning through the act of creating. Don’t just listen to theory, build your own strategy and test it as you go. It’s like an MBA in a weekend.
2) Build your network:
This isn’t just a happy-hour. Startup Weekend attracts your community’s best makers and do-ers. By spending a weekend working to build scalable companies that solve real-world problems, you will build long-lasting relationships and possibly walk away with a job or a even an investor.
3) Co-Founder Dating:
We all know it’s not just about the idea – it’s about the team. Startup Weekend is hands down the best way to to find someone you can actually launch a startup with.
4) Learn a new skill:
Step outside of your comfort zone. With a whole weekend dedicated to letting your creative juices flow, Startup Weekends are prefect opportunities to work on a new platform, learn a new programming language, or just try something different.
5) Actually launch a business:
Over 36% of Startup Weekend startups are still going strong after 3 months. Roughly 80% of participants plan on continuing working with their team or startup after the weekend.
6) Get face time with thought leaders:
Local tech and startup leaders participate in Startup Weekends as mentors and judges. Get some one-on-one time with the movers and shakers in your community.
7) Save money & get stuff:
Startup Weekends cost $40 (less for students). Your ticket covers seven meals, snack, access to exclusive resources our global sponsors, and all the coffee you can drink.
8) Join a global community:
Join over 30,000 Startup Weekend alumni, all on a mission to change the world.
Facilities for the Attendees?
Mentors : Whether it’s growth, design, or prototype,you’ll find a mentor who can help
Free WIFI: You will Get Free WIFI Access from our Telecom Partner
Meals : Morning Refreshment Plus Lunch and Dinner
Community Perks and Discounts : Take advantage of perks and discounts offered to all Startup Weekend participants from the Global sponsors.
Much More: Whatever you are building, our sponsors and community have put together some fantastic resources to help you build your idea.
october 27 (Friday) - 29 (Sunday)
Trinco Beach Hotel
326,Dyke Street, Trincomalee